{"id":"CVE-2021-25952","details":"Prototype pollution vulnerability in ‘just-safe-set’ versions 1.0.0 through 2.2.1 allows an attacker to cause a denial of service and may lead to remote code execution.","aliases":["GHSA-v26w-gcxh-v4r7"],"modified":"2026-07-08T21:27:11.991370Z","published":"2021-07-07T12:15:08.573Z","references":[{"type":"FIX","url":"https://github.com/angus-c/just/commit/dd57a476f4bb9d78c6f60741898dc04c71d2eb53"},{"type":"EVIDENCE","url":"https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25952"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/angus-c/just","events":[{"introduced":"4edca9d892a2c2b9d58b93f492f1c2c578efafa7"},{"last_affected":"4119cd4ff6216fa28b3bbaa8ca5c0e6e74fa65ba"},{"fixed":"dd57a476f4bb9d78c6f60741898dc04c71d2eb53"}],"database_specific":{"cpe":"cpe:2.3:a:just-safe-set_project:just-safe-set:*:*:*:*:*:node.js:*:*","extracted_events":[{"introduced":"1.0.0"},{"last_affected":"2.2.1"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["just-zip-it@2.3.1","just-variance@1.2.1","just-values@1.4.1","just-unique@3.4.1","just-union@2.3.1","just-typeof@2.1.1","just-truncate@1.3.1","just-throttle@3.1.1","just-template@1.3.1","just-tail@2.3.1","just-standard-deviation@1.2.1","just-squash@1.2.1","just-split@2.3.1","just-split-at@2.3.1","just-sort-by@2.1.1","just-snake-case@2.1.1","just-skewness@1.2.1","just-shuffle@3.2.1","just-safe-set@3.1.1","just-safe-get@3.1.1","just-right-pad@2.2.1","just-replace-all@1.2.1","just-remove@2.2.1","just-reduce-object@1.2.1","just-range@3.1.1","just-random@2.2.1","just-random-integer@2.1.1","just-prune@1.2.1","just-pluck-it@1.3.1","just-pick@3.1.1","just-permutations@1.2.1","just-percentile@2.1.1","just-pascal-case@2.1.1","just-partition@1.4.1","just-partial-it@2.2.1","just-once@1.4.1","just-omit@1.4.1","just-modulo@1.3.1","just-mode@1.2.1","just-merge@2.1.1","just-memoize@1.3.1","just-memoize-last@2.1.1","just-median@1.2.1","just-mean@1.3.1","just-map-values@2.2.1","just-map-object@1.3.1","just-map-keys@1.2.1","just-left-pad@2.3.1","just-last@2.4.1","just-kebab-case@3.1.1","just-is-primitive@1.2.1","just-is-prime@1.2.1","just-is-empty@2.1.1","just-is-circular@1.2.1","just-intersect@3.4.1","just-insert@2.4.1","just-index@3.2.1","just-has@1.1.1","just-group-by@1.3.1","just-flush@1.2.1","just-flip@1.2.1","just-flip-object@1.2.1","just-flatten-it@4.2.1","just-filter-object@2.1.1","just-extend@5.1.1","just-entries@1.2.1","just-diff@4.1.2","just-diff-apply@3.1.2","just-demethodize@2.2.1","just-debounce-it@2.1.1","just-curry-it@4.1.1","just-compose@1.2.1","just-compare@1.5.1","just-compact@2.4.1","just-clone@4.1.1","just-clamp@3.3.1","just-cartesian-product@3.1.1","just-capitalize@2.2.1","just-camel-case@5.1.1","just-zip-it@2.3.0","just-variance@1.2.0","just-values@1.4.0","just-unique@3.4.0","just-union@2.3.0","just-typeof@2.1.0","just-truncate@1.3.0","just-throttle@3.1.0","just-template@1.3.0","just-tail@2.3.0","just-standard-deviation@1.2.0","just-squash@1.2.0","just-split@2.3.0","just-split-at@2.3.0","just-sort-by@2.1.0","just-snake-case@2.1.0","just-skewness@1.2.0","just-shuffle@3.2.0","just-safe-set@3.1.0","just-safe-get@3.1.0","just-right-pad@2.2.0","just-replace-all@1.2.0","just-remove@2.2.0","just-reduce-object@1.2.0","just-range@3.1.0","just-random@2.2.0","just-random-integer@2.1.0","just-prune@1.2.0","just-pluck-it@1.3.0","just-pick@3.1.0","just-permutations@1.2.0","just-percentile@2.1.0","just-pascal-case@2.1.0","just-partition@1.4.0","just-partial-it@2.2.0","just-once@1.4.0","just-omit@1.4.0","just-modulo@1.3.0","just-mode@1.2.0","just-merge@2.1.0","just-memoize@1.3.0","just-memoize-last@2.1.0","just-median@1.2.0","just-mean@1.3.0","just-map-values@2.2.0","just-map-object@1.3.0","just-map-keys@1.2.0","just-left-pad@2.3.0","just-last@2.4.0","just-kebab-case@3.1.0","just-is-primitive@1.2.0","just-is-prime@1.2.0","just-is-empty@2.1.0","just-is-circular@1.2.0","just-intersect@3.4.0","just-insert@2.4.0","just-index@3.2.0","just-has@1.1.0","just-group-by@1.3.0","just-flush@1.2.0","just-flip@1.2.0","just-flip-object@1.2.0","just-flatten-it@4.2.0","just-filter-object@2.1.0","just-extend@5.1.0","just-entries@1.2.0","just-diff@4.1.0","just-diff-apply@3.1.0","just-demethodize@2.2.0","just-debounce-it@2.1.0","just-curry-it@4.1.0","just-compose@1.2.0","just-compare@1.5.0","just-compact@2.4.0","just-clone@4.1.0","just-clamp@3.3.0","just-cartesian-product@3.1.0","just-capitalize@2.2.0","just-camel-case@5.1.0","just-unique@2.0.3","just-union@1.1.22","just-typeof@1.0.4","just-template@1.1.20","just-remove@1.1.21","just-reduce-object@1.0.2","just-pluck-it@1.1.20","just-pick@1.0.2","just-partial-it@1.1.22","just-map-object@1.1.20","just-last@1.1.22","just-intersect@1.1.21","just-flatten-it@1.1.23","just-filter-object@1.1.21","just-extend@1.1.20","just-curry-it@1.1.21","just-compose@1.0.5","just-compare@1.1.20","just-unique@2.0.2","just-union@1.1.20","just-typeof@1.0.3","just-template@1.1.19","just-remove@1.1.20","just-reduce-object@1.0.1","just-pluck-it@1.1.19","just-partial-it@1.1.21","just-map-object@1.1.19","just-last@1.1.20","just-intersect@1.1.20","just-flip-object@1.0.1","just-flatten-it@1.1.21","just-filter-object@1.1.20","just-extend@1.1.19","just-curry-it@1.1.20","just-compose@1.0.4","just-compare@1.1.19","just-unique@1.1.17","just-union@1.1.17","just-remove@1.1.17","just-pluck-it@1.1.17","just-partial-it@1.1.17","just-last@1.1.17","just-intersect@1.1.17","just-flatten-it@1.1.17","just-filter@1.1.17","just-extend@1.1.17","just-curry-it@1.1.17","just-compose@1.0.3","just-compare@1.1.17","just-pluck-it@1.1.9","just-function-partial@1.1.9","just-function-curry@1.1.9","just-filter@1.1.9","just-extend@1.1.9","just-compare@1.1.9","just-array-unique@1.1.9","just-array-union@1.1.9","just-array-remove@1.1.9","just-array-last@1.1.9","just-array-intersect@1.1.9","just-array-flatten@1.1.9","just-pluck-it@1.1.8","just-function-partial@1.1.8","just-function-curry@1.1.8","just-filter@1.1.8","just-extend@1.1.8","just-compare@1.1.8","just-array-unique@1.1.8","just-array-union@1.1.8","just-array-remove@1.1.8","just-array-last@1.1.8","just-array-intersect@1.1.8","just-array-flatten@1.1.8","v1.1.6","v1.1.5","v1.1.4","v1.1.3","v1.1.2","v1.1.1","v1.1.0","just-pluck-it@1.0.0","just-flatten@1.0.0","just-extend@1.0.0","just-compare@1.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-25952.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}